Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
f9393f911bd76deb09a860752463ecec_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f9393f911bd76deb09a860752463ecec_JaffaCakes118
-
Size
210KB
-
MD5
f9393f911bd76deb09a860752463ecec
-
SHA1
6b57a0d2f128bd622e9259c0628562c7b7920a85
-
SHA256
48c9d7a6ed4593e055d7f939ca71e2d2b201db98539e160c7be10e5df25ab1cf
-
SHA512
a65e9d82f7912e44e24e63af5d8df03ffcfa52005e8ca6888f158757477d1b477749bca87181f62016933f9de9082918b7ff93d54fe6891c52d1fe542b483d3a
-
SSDEEP
6144:FIrPj0NmWtN9ggPRoSp65779WBbIf4PP0Q:Fq0Nx9FpoSI5779+b6Kr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9393f911bd76deb09a860752463ecec_JaffaCakes118
Files
-
f9393f911bd76deb09a860752463ecec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE